7f5b14491ee501f56bb8fe24dd110530_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f5b14491ee501f56bb8fe24dd110530_NEIKI
Size

715KB
MD5

7f5b14491ee501f56bb8fe24dd110530
SHA1

1ce34a56bc5dd1121850b13190b716df070c1e7a
SHA256

835614cff8fdc4c4c8704c8859871d9bffbe97ad13224be7883ceb0b35ac53ec
SHA512

b398902f492c2d26744d15e2ed9ff3c0363a4daf32f9a2de1a7b1fdb02bf26668627af94614a60e325244d3cf9f19dcbf55c726a397b973d54ff1647817b5f6b
SSDEEP

12288:oesyl0WVDXa9zFM9hP9MI4Z94n+YcK0FiUs14K/hkpyZh1Zv5:syicP9MFHY10MUsV/9Z7Zv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f5b14491ee501f56bb8fe24dd110530_NEIKI

Files

7f5b14491ee501f56bb8fe24dd110530_NEIKI
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ